https://github.com/stanfrbd/crowdstrike-api-gui
https://github.com/stanfrbd/crowdstrike-api-gui
Last synced: 4 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/stanfrbd/crowdstrike-api-gui
- Owner: stanfrbd
- License: mit
- Created: 2025-10-23T15:48:36.000Z (9 months ago)
- Default Branch: main
- Last Pushed: 2025-10-24T10:44:42.000Z (9 months ago)
- Last Synced: 2025-10-24T12:31:17.680Z (9 months ago)
- Language: PowerShell
- Size: 13.7 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
# GUI for Crowdstrike API sample app
Inspired from this repo from Microsoft: https://github.com/microsoft/mde-api-gui/
> [!IMPORTANT]
> This project has nothing to do with Microsoft nor Crowdstrike.
## Pros
- No installation of FalconSDK needed
- Quick to execute and simple GUI
- Very useful in case of critical incident
## Cons
- Will be more difficult to keep up to date
## Scopes for Crowdstrike API Client
- Hosts (Read / Write)
## Implementation
- Connect to Crowdstrike API client and get token with good CID scope: ✅
- Add / Remove Tag: implemented and tested ✅
- Bulk Network Containment: implemented and tested but needs additional tests, especially on large CSV files (100+ hostnames) ⚠️
- Bulk Lift Containment: implemented and tested but needs additional tests, especially on large CSV files (100+ hostnames) ⚠️
- Logging: to improve ⚠️
- Creds storage: SecureString (DPAPI) so shouldn't be stored at all because of the scope of these API credentials.
## Docs
- https://falcon.eu-1.crowdstrike.com/documentation/page/c0b16f1b/host-and-host-group-management-apis
- https://www.falconpy.io/Service-Collections/Hosts.html